Linux ·
openSUSE Leap · Security advisory · January 17, 2026
openSUSE Leap · Security advisory · January 17, 2026SUSE-SU-2026:0142-1: govulncheck-vulndb security update
SUSE-SU-2026:0142-1, released January 17, 2026, fixes 31 CVEs in govulncheck-vulndb (version 0.0.20260114T191543-150000.1.137.1). None of them is reported as exploited. Patch Radar priority: High.
High
CVEs closed
31
None rated Critical
Exploited
0
None reported
Highest CVSS
7.5
Base score, 0 to 10
Highest EPSS
0.0194
80th percentile
Priority of the 31 CVEs
Patch now 0
Urgent 0
High 1
Routine 30
Fixed package versions
| Product | Release | Fixed in |
|---|---|---|
| govulncheck-vulndb | opensuse-leap 15.6 | 0.0.20260114T191543-150000.1.137.1 |
CVEs this fix closes
| Priority | CVE | Title | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|
| High | CVE-2025-68151 | CoreDNS gRPC/HTTPS/HTTP3 servers lack resource limits, enabling DoS via unbounded connections and oversized messages | 7.5 | 0.0049 | None reported |
| Routine | CVE-2026-22688 | govulncheck-vulndb: GO-2026-4292 GHSA-78h3-63c4-5fqc | n/a | 0.0194 | None reported |
| Routine | CVE-2026-0650 | govulncheck-vulndb: GO-2026-4286 GHSA-rwp9-5g7q-73q3 | n/a | 0.0152 | None reported |
| Routine | CVE-2017-18900 | govulncheck-vulndb: GO-2026-4303 GHSA-8q4v-35v6-g8wr | n/a | 0.0130 | None reported |
| Routine | CVE-2017-18898 | govulncheck-vulndb: GO-2026-4300 GHSA-9589-mq83-f749 | n/a | 0.0111 | None reported |
| Routine | CVE-2017-18895 | govulncheck-vulndb: GO-2026-4295 GHSA-h742-xx59-r9pq | n/a | 0.0093 | None reported |
| Routine | CVE-2017-18901 | govulncheck-vulndb: GO-2026-4304 GHSA-c253-8hr4-r8v9 | n/a | 0.0093 | None reported |
| Routine | CVE-2017-18894 | govulncheck-vulndb: GO-2026-4297 GHSA-gg42-mwr6-p82c | n/a | 0.0083 | None reported |
| Routine | CVE-2026-21859 | govulncheck-vulndb: GO-2026-4284 GHSA-8v65-47jx-7mfr | n/a | 0.0081 | None reported |
| Routine | CVE-2017-18896 | govulncheck-vulndb: GO-2026-4299 GHSA-63wg-qmrv-7q66 | n/a | 0.0078 | None reported |
| Routine | CVE-2017-18905 | govulncheck-vulndb: GO-2026-4306 GHSA-g24c-fx4v-xg9w | n/a | 0.0078 | None reported |
| Routine | CVE-2025-63389 | govulncheck-vulndb: GO-2025-4251 GHSA-f6mr-38g8-39rg | n/a | 0.0071 | None reported |
| Routine | CVE-2017-18891 | govulncheck-vulndb: GO-2026-4298 GHSA-vrh2-rprg-rgc6 | n/a | 0.0069 | None reported |
| Routine | CVE-2017-18897 | govulncheck-vulndb: GO-2026-4301 GHSA-f7c3-7vp3-44p6 | n/a | 0.0069 | None reported |
| Routine | CVE-2017-18893 | govulncheck-vulndb: GO-2026-4296 GHSA-887v-xh2x-47cm | n/a | 0.0069 | None reported |
| Routine | CVE-2017-18904 | govulncheck-vulndb: GO-2026-4302 GHSA-8pff-p3gx-w4jf | n/a | 0.0069 | None reported |
| Routine | CVE-2025-15107 | govulncheck-vulndb: GO-2025-4269 GHSA-43h9-hc38-qph5 | n/a | 0.0062 | None reported |
| Routine | CVE-2025-62877 | govulncheck-vulndb: GO-2026-4281 GHSA-6g8q-hp2j-gvwv | n/a | 0.0051 | None reported |
| Routine | CVE-2025-14986 | govulncheck-vulndb: GO-2025-4272 GHSA-p2gr-hm8g-q772 | n/a | 0.0043 | None reported |
| Routine | CVE-2025-60538 | govulncheck-vulndb: GO-2026-4308 GHSA-mw8h-g64c-rxv4 | n/a | 0.0041 | None reported |
| Routine | CVE-2025-14987 | govulncheck-vulndb: GO-2026-4273 GHSA-hmhp-gh8m-c8xp | n/a | 0.0040 | None reported |
| Routine | CVE-2024-6717 | govulncheck-vulndb: GO-2026-4278 GHSA-5mqx-rpxv-mvxj | n/a | 0.0039 | None reported |
| Routine | CVE-2025-69413 | govulncheck-vulndb: GO-2026-4274 GHSA-pc73-rj2c-wvf9 | n/a | 0.0039 | None reported |
| Routine | CVE-2026-22687 | govulncheck-vulndb: GO-2026-4293 GHSA-pcwc-3fw3-8cqv | n/a | 0.0038 | None reported |
| Routine | CVE-2026-22253 | govulncheck-vulndb: GO-2026-4290 GHSA-6jm8-x3g6-r33j | n/a | 0.0030 | None reported |
Showing 1 to 25 of 31
1Next
Patch Radar data is free to use with attribution. Terms and how to credit it.
Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.